CVE-2010-2473

score

<0.1

cvss

6.5

epss

1.0%

published

2019-11-07

kev added

—

first seen

2026-10-21

Drupal 6.x before 6.16 and 5.x before 5.22 contain a session management flaw caused by improper session blocking, letting blocked users maintain active sessions, exploit requires user to have an active session.